Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hwpw-gw93-83r7

Опубликовано: 20 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system.

A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system.

EPSS

Процентиль: 35%
0.00146
Низкий

7 High

CVSS3

Дефекты

CWE-367

Связанные уязвимости

CVSS3: 7
nvd
около 3 лет назад

A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system.

CVSS3: 7.8
fstec
около 3 лет назад

Уязвимость механизма очистки Damage Cleanup Engine средства антивирусной защиты Trend Micro Maximum Security, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 35%
0.00146
Низкий

7 High

CVSS3

Дефекты

CWE-367